resource with working auth, read, and list